← Back to browse · API

CVE-2020-1040

Severity
CRITICAL
CVSS
9.0
EPSS
0.06903
Risk score
63.42
CISA KEV
Yes
PoC
No
Published
2020-07-14
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2020-11934, GHSA-98QH-XXWW-5R96
Products
Microsoft:Hyper-V RemoteFX, Microsoft:Windows Server 2008 R2 for x64-based Systems Service Pack 1, Microsoft:Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Core installation), Microsoft:Windows Server 2012, Microsoft:Windows Server 2012 (Core installation), Microsoft:Windows Server 2012 R2, Microsoft:Windows Server 2012 R2 (Core installation), Microsoft:Windows Server 2016, Microsoft:Windows Server 2016 (Core installation)
Sources
cisa.gov CVE-2020-1040
euvd EUVD-2020-11934

Description

A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1032, CVE-2020-1036, CVE-2020-1041, CVE-2020-1042, CVE-2020-1043.

References